Faith

A difficult to exploit vulnerability in Oracle VM VirtualBox allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data.

A critical issue was found in the SourceCodester Canteen Management System, affecting some unknown functionality of the file changeUsername.php. The manipulation of the `username` argument leads to SQL injection. The attack can be launched remotely.

A critical issue was found in the function query of the file createCategories.php, where the manipulation of the `categoriesStatus` argument leads to sql injection. The attack can be initiated remotely.

A critical issue has been found in the SourceCodester Canteen Management System. This issue affects the function query of the file createuser.php. The manipulation of the argument `uemail` leads to sql injection. The attack may be initiated remotely.

A problematic issue has been found in the SourceCodester Web-Based Student Clearance System, affecting the `prepare` function of the file `/Admin/add-student.php`. This issue leads to cross-site scripting and can be exploited remotely.

A critical issue has been found, affecting an unknown function of the file /Admin/login.php, specifically the POST Parameter Handler component. The manipulation of the `txtusername` argument leads to SQL injection. This issue can be exploited remotely.